topic Global Protect gateway location. in GlobalProtect Discussions

Global Protect gateway location.

Den001 — Wed, 13 Mar 2024 23:45:50 GMT

Would anyone know why the gateway connection is from across different regions when the user hasn't travelled?

Re: Global Protect gateway location.

kiwi — Fri, 15 Mar 2024 11:01:10 GMT

When multiple gateways are listed in the portal, the client will automatically connect to the preferred gateway. The clients use priority and response time as a factor to determine the best gateway.

Kind regards,

-Kim.

Re: Global Protect gateway location.

reaper — Fri, 15 Mar 2024 12:28:43 GMT

Gateways are configured in your portal with (or without) a certain Priority, but by default when the agent comes online it will test connectivity with all of the configured gateways

If the highest priority gateway has the best response time, it will be used to connect. If for some reason the highest priority gateway has bad responsiveness (or all gateways have the same preference) the fastest one, which can be in a different region, will be used to establish a connection

if you want to prevent users from using gateways in different countries you can, for example, set source country restrictions for each gateway so they are only used 'in-country'